Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Bart Silverstrim
On Sep 30, 2004, at 8:32 AM, Samuel Benzaquen wrote: As I remember... there IS a plugin for using Clam on Squid =P Methinks it isn't as widely deployed as it may become, or there'd be more mentions of it and howtos...and we'd probably have to be running it by now, and the ClamAV team would be hou

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread [EMAIL PROTECTED]
Christopher X. Candreva said: > On Wed, 29 Sep 2004 [EMAIL PROTECTED] wrote: > >> ... It's interesting that viruses are finally starting to implement >> what >> we were joking about in 1995 at high school... > > It's interesting we were making similar jokes in 1985 in high school. > > And back in

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Christopher X. Candreva
On Wed, 29 Sep 2004 [EMAIL PROTECTED] wrote: > ... It's interesting that viruses are finally starting to implement what > we were joking about in 1995 at high school... It's interesting we were making similar jokes in 1985 in high school. =

RE: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Bart > Silverstrim > Sent: Thursday, September 30, 2004 7:50 AM > > > On Sep 30, 2004, at 3:26 AM, Damian Menscher wrote: > > > On Wed, 29 Sep 2004 [EMAIL PROTECTED] wrote: > >> ... It's interesting that vi

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Bart Silverstrim
On Sep 30, 2004, at 3:26 AM, Damian Menscher wrote: On Wed, 29 Sep 2004 [EMAIL PROTECTED] wrote: ... It's interesting that viruses are finally starting to implement what we were joking about in 1995 at high school... I'm impressed with how far we've come. Less than a year ago, I could most email

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Bart Silverstrim
On Sep 29, 2004, at 11:09 PM, Dennis Peterson wrote: Anyone got a plan for when encrypted zip'd jpeg files start showing up? I'm switching my userbase to OS X and Linux. :-) -Bart ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Trog
On Thu, 2004-09-30 at 08:26, Damian Menscher wrote: > false positive. Only the third rule: > Exploit.JPEG.Comment.3:5:0:ffd8fffe00(00|01) > is 100% safe. (Note that I work for the Imaging Technology Group, so a > false positive on a jpeg would be a Very Bad Thing. And even a 0.01% > failure

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-30 Thread Damian Menscher
On Wed, 29 Sep 2004 [EMAIL PROTECTED] wrote: On Wed, 29 Sep 2004, Dennis Peterson wrote: Anyone got a plan for when encrypted zip'd jpeg files start showing up? Either start a "password greper/parser" which should be able to be updated to recognize new formats in a non-executable way (regex or some

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread clamav
On Wed, 29 Sep 2004, Dennis Peterson wrote: > > Anyone got a plan for when encrypted zip'd jpeg files start showing up? > > dp > ___ > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > Either start a "password greper/parser" which should

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Dennis Peterson
Damian Menscher said: > On Wed, 29 Sep 2004, Damian Menscher wrote: >> >> If I had to guess, I'd say clamscan has some uninitialized memory that's >> causing occasional false positives. If anyone can suggest an >> alternative >> explanation, or a way I could debug this further, I'd love to help.

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Damian Menscher
On Wed, 29 Sep 2004, Damian Menscher wrote: I just upgraded to 0.80rc3 on a RH9 machine. As a test of clamav, I went into my public_html directory and did a clamscan -r. It found one of my images to contain the virus: [EMAIL PROTECTED] public_html]# clamscan -r . ./Asia_Pics/New Folder/dsc_000

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Tomasz Kojm
On Wed, 29 Sep 2004 10:21:10 -0700 Brandon Knitter <[EMAIL PROTECTED]> wrote: > I'm unsure what type of camera originally took the pictures. But the > original pictures DO NOT show as having a virus. After I put it > through ImageMagick's"convert" (I make thumbnails) it then thinks it > has the

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Damian Menscher
On Wed, 29 Sep 2004, Brandon Knitter wrote: I'm unsure what type of camera originally took the pictures. But the original pictures DO NOT show as having a virus. After I put it through ImageMagick's "convert" (I make thumbnails) it then thinks it has the virus. Now, I'm pretty sure that ImageMagi

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Brandon Knitter
I'm unsure what type of camera originally took the pictures. But the original pictures DO NOT show as having a virus. After I put it through ImageMagick's "convert" (I make thumbnails) it then thinks it has the virus. Now, I'm pretty sure that ImageMagick isn't injecting a virus as many of the o

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Damian Menscher
On Tue, 28 Sep 2004, Brandon Knitter wrote: I have a few images that seem to be flagged as virii, when they are not. I'm taking an image that is considered fine (no virus), then when I process it through convert (ImageMagick) it thinks it's has the virus. I have over 4000 images I've processed t

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Kevin Spicer
On Wed, 2004-09-29 at 05:34, Brandon Knitter wrote: > I have a few images that seem to be flagged as virii, when they are not. I'm > taking an image that is considered fine (no virus), then when I process it > through convert (ImageMagick) it thinks it's has the virus. I have over 4000 > images

[Clamav-users] ERROR: JPEG.Comment

2004-09-28 Thread Brandon Knitter
I have a few images that seem to be flagged as virii, when they are not. I'm taking an image that is considered fine (no virus), then when I process it through convert (ImageMagick) it thinks it's has the virus. I have over 4000 images I've processed this way, and only 232 of them clamscan think